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CLAIM AMENDMENTS 
This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1 . (Currently Amended) A computer-implemented method of monitoring an 
element in a computer network, said method comprising: 

monitoring a preselected variable relating to said element; 

defining a threshold for the monitored preselected variable , wherein defining 
the threshold for the monitored preselected variable comprises: 

defining a first set of threshold eras such that the threshold eras of the 
first set of threshold eras are periodic at an era freguencv and have a common era 
length: 

defining a plurality of metric threshold periods that occur within each 
threshold era of the first set of threshold eras such that the metric threshold periods 
do not overlap each other and occur within the threshold eras of the first set of 
threshold eras at predetermined times within the threshold eras, the plurality of 
metric threshold periods including a first metric threshold period and a second metric 
threshold period: 

computing an average value for the preselected variable within the first 
metric threshold period based on values obtained for the preselected variable within 
the first metric threshold period during previous threshold eras in the first set of 
threshold eras: 

computing an average value for the preselected variable within the 
second metric threshold period based on values obtained for the preselected 
variable within the second metric threshold period during previous threshold eras in 
the first set of threshold eras; 

determining a first threshold based on the average value for the 
preselected variable within the first metric threshold period: and 

determining a second threshold based on the average value for the 
preselected variable for the second metric threshold period: 

establishing a sliding window in time that is shorter than the common era 

length : 
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determining if the preselected variable is currently breaching the threshold 
during a threshold era included in the first set of threshold eras, wherein determining 
if the preselected variable is currently breaching the threshold during a threshold era 
included in the first set of threshold eras comprises: 

determining if the preselected variable is breaching the first threshold 
during a fir st metric threshold period of the current era included in the first set of 
threshold eras; and 

determining if the preselected variable is breaching the second 
threshold during a second metric threshold period of the current threshold era 
included in the first set of threshold eras: 

repeatedly generating a time above threshold value, said time above 
threshold value being a measure of an amount of time during which the preselected 
mon i torod variable exceeded the threshold during the sliding window of timer 
wh e rein the measure of the amount of time dur i ng which tho monitor e d variabl o 
e xce e d o d tho throchold dur i ng the sliding window in timo inoludoc an aggr o gation of 
two or mor e noncontiguous time intervals during which tho monitorod var i ab l o 
e xce e d e d th e throchold during th e s li d i ng w i ndow i n t i m o; 

detecting when the time above threshold value exceeds a predefined 
condition window value; and 

in response to detecting when the time above threshold value exceeds said 
condition windo w value , generating an alarm. 

2. (Original) The method of claim 1 further comprising after generating an 
alarm, maintaining the alarm at least as long as the time above threshold value 
exceeds a clear window value. 

3. (Original) The method of claim 2 wherein said clear window value is egual to 
said condition window value. 
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4. (Original) The method of claim 3 further comprising: 

monitoring a plurality of variables relating to said element, said preselected 
variable being one of said plurality of variables; and 

for each of the plurality of monitored variables, defining a corresponding 
threshold for that other variable, wherein the time above threshold value is a 
measure of an amount of time during which any one or more of the monitored 
variables exceeded its corresponding threshold during the corresponding sliding 
window of time. 

5. (Currently Amended) The method of claim 1 wherein determining the-step 
of d e fining the first threshold for the pros e lectod variablo comprises: 

comput i ng an av e rage valu e for tho pr e s el ect e d var i ab lo bas e d on va l u o s 
obta i n e d for th e pr e s e lect e d variabl e ov e r a corresponding prior p e riod; 
defining an excursion amount; and 

setting the first threshold equal to a sum of the average value for the 
preselected variable within the first metric threshold period plus the excursion 
amount. 

6. (Currently Amended) The method of claim 1 5 wherein the common era 
length p e riod of time is less than or equal to a day. 

7. (Currently Amended) The method of claim 1_§ wherein defining a threshold 
for the monitored preselected variable further comprises th e corr e sponding p e r i od of 
tim e is a particular hour por i od of a dayi 

defining a second set of threshold eras such that the threshold eras of the 
second set of threshold eras are periodic at the era frequency and have the common 
era length, but are offset in time from threshold eras of the first set of threshold eras 
such that the eras of the first set of threshold eras and the eras of the second set of 
threshold eras do not overlap: 

defining a plurality of metric threshold periods that occur within each threshold 
era of the second set of threshold eras such that the metric threshold periods do not 
overlap each other and occur within the threshold eras of the second set of threshold 
eras at predetermined times within the threshold eras, the plurality of metric 
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threshold periods that occur within each threshold era of the second set of threshold 
eras including a third metric threshold period and a fourth metric threshold period: 

computing an average value for the preselected variable within the third 
metric threshold period based on values obtained for the preselected variable within 
the third metric threshold period during previous threshold eras in the second. set of 
threshold eras; 

computing an average value for the preselected variable within the fourth 
metric threshold period based on values obtained for the preselected variable within 
the fourth metric threshold period during previous threshold eras in the second set of 
threshold eras: 

determining a third threshold based on the average value for the preselected 
variable within the third metric threshold period; and 

determining a fourth threshold based on the average value for the preselected 
variable for the fourth metric threshold period. 

8. (Currently Amended) The method of claim 7_€ wherein the common era 
length is a day and the era freguency is once per week such that the first set of 
threshold eras includes days that fall on a first day of the week, and the second set 
of threshold eras includes days that fall on a second day of the week eteo-ef 
computing th e av o rag e compr icoc comput i ng a m oa n va l u o for th o pr o c olo ct o d 
variabl e u s ing valu o s obtained for that pr e s e l e cted variabl e for th e sam o hour p e r i od 
of th e sam e day of th e w e ek for a prod o t o rm i n e d numb e r of provious wooks . 

9. (Currently Amended) The method of claim 5 wherein the step of defining an 
excursion amount comprises: 

computing a standard deviation for the preselected variable based on values 
obtained for the preselected variabl e ovor a prodotormin o d poriod of t i m o; and 

setting the excursion amount equal to K times the computed standard 
deviation, wherein K is a positive number. 

1 0. (Currently Amended) The method of claim 89 wherein tho stop of 
computing an average value for the preselected variable within the first metric 
threshold period based on th e standard d o vint i nn rampr i rnr mmpnting th n otnnH^rH 
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d e viat i on using values obtained for that preselected variable within the first metric 
threshold period during previous threshold eras in the first set of threshold eras 
comprises computing an average value for values of the preselected variable 
corresponding to f or- the same hour period of the same day of the week for a 
predetermined number of previous weeks. 

1 1 . (Currently Amended) The method of claim 1_2- wherein the measure of the 
amount of time during which the monitored variable exceeded the threshold during 
the sliding window in time includes an aggregation of two or more noncontiguous 
time intervals during which the preselected variable exceeded the threshold during 
the sliding window in time th e st e p of def i ning th e threshold for th e prnr.nl n r . t n H 
variab le comprises: 

d e f i ning an excursion amount; and 

s e tt i ng tho threshold oqua l to H less th e excursion amount, wh e re H is a 
pos i t i v e numb o r . 

12. (Currently Amended) The method of claim 14 wherein the measure of the 
amount of time during which the monitored variable exceeded the threshold during 
the sliding window in time includes time during which the preselected variable 
exceeded the threshold in two or more metric threshold periods st e p of dofining an 
e xcurs i on amount compr i s e s: 

computing a standard d e viat i on for th e prosol o ct e d variabl e based on values 
obta i n e d for th e pr esele ct e d var i ab le ov e r a pred e t e rmin e d p e riod of tim e ; and 

s e tt i ng th e e xcurs i on amount e qual to K t i m e s tho computed standard 
d e viation, wh e re i n K is a positiv e number . 

1 3. (Currently Amended) A computer-implemented method of monitoring a« 
ele m e nt in a computer network, said method comprising: 

presenting a user with a plurality of variables associated with one or more 
elements in a computer network: 

receiving a selection by the user of two or more of the presented variables, 
the two or more selected variables comprising a first selected variable and a second 
selected variable: 
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defining a profile for the selected variables that ele m e nt , said profile including 
a plurality of different alarm rules, the plurality of different alarm rules comprising a 
first alarm rule each of s aid d i ffer e nt alarm rul o r , establishing an alarm test for the 
first selected variable, and a second alarm rule establishing an alarm test for the 
second selected variable a corr es ponding on e or mor e vari a b le s ; 

detecting when the alarm test for any one or more of the plurality of different 
alarm rules is met , including the first alarm rule and the second alarm rule : 

r e p e at e d l y g e n e rating a tim e abov e thr e shold value, said t i m e above 
thr e shold va l ue boing a moasuro of an amount of t i m o during which at loast on o of 
the one or more alarm tosts has boon met during a preselected prior w i ndow of tim o , 
wh e r e in th e m e asur e of the amount of tim e dur i ng which at loast on e of tho on o or 
mor e alarm t e sts has beon mot during the pr e sel e cted pr i or window of t i m e includ e s 
an aggr o gation of two or mor o noncont i guous tim o int o rvals during which at lo a st 
on e of th e ono or mor e alarm t e sts has bo e n mot during a pr e s el ectod prior window 

det e cting whon th e t i m e above thr e shold va l ue excoods a prodof i nod 
cond i tion window va l u o ; and 

in response to detecting that one or both of the first alarm rule and/or the 
second alarm rule are met wh e n th e t i m o abov e thr e sho l d vn l nn nvr . n n riF. r . n\d 
cond i tion window , generating an output to the user connoting that one or more of the 
plurality of different alarm rules has been met such that the output identifies the 
profile for the selected variables to the user without indicating which of the plurality of 
different alarm rules included in the profile for the selected variables has been met 

14. (Currently Amended) The method of claim 13 further comprising persisting 
the output aft e r g e nerating an exc e pt i on, maintain i ng thnt R ynnptinn at least as long 
as either of the first alarm rule or the second alarm rule are met th e tim o abov o 
thr e shold va l u e exc ee ds a c l ear window valuo . 



15. (Cancel) 
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16. (Currently Amended) A non-volatile electronic storage medium that 
electronically stores a computer program configured to cause stored on a computor 
r e adabl e m e dium for cau o ing a computer system to perform the functions of: 
monitoring a preselected variable relating to said element; 

defining a threshold for the monitored preselected variable , wherein defining 
the threshold for the monitored preselected variable comprises: 

defining a first set of threshold eras such that the threshold eras of the 
first set of threshold eras are periodic at an era freguency and have a common era 
length: 

defining a plurality of metric threshold periods that occur within each 
threshold era of the first set of threshold eras such that the metric threshold periods 
do not overlap each other and occur within the threshold eras of the first set of 
threshold eras at predetermined times within the threshold eras, the plurality of 
metric threshold periods including a first metric threshold period and a second metric 
threshold period; 

computing an average value for the preselected variable within the first 
metric threshold period based on values obtained for the preselected variable within 
the first metric threshold period during previous threshold eras in the first set of 
threshold eras; 

computing an average value for the preselected variable within the 
second metric threshold period based on values obtained for the preselected 
variable within the second metric threshold period during previous threshold eras in 
the first set of threshold eras; 

determining a first threshold based on the average value for the 
preselected variable within the first metric threshold period: and 

determining a second threshold based on the average value for the 
preselected variable for the second metric threshold period: 

establishing a sliding window in time that is shorter than the common era 

length ; 

determining if the preselected variable is currently breaching the threshold 
during a threshold era included in the first set of threshold eras, wherein determining 
if the preselected variable is currently breaching the threshold during a threshold era 
included in the first set of threshold eras comprises: 
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determining if the preselected variable is breaching the first threshold 
during a first metric threshold period of the current era included in the first set of 
threshold eras; and 

determining if the preselected variable is breaching the second 
threshold during a second metric threshold period of the current threshold era 
included in the first set of threshold eras: 

repeatedly generating a time above threshold value, said time above 
threshold value being a measure of an amount of time during which the preselected 
monitor o d variable exceeded the threshold during the sliding window of timer 
wh e rein th e moasuro of tho amount of t i me during which the monitored variabl o 
exc ee d e d th e throsho l d dur i ng th e sliding window in time includes an aggrogation of 
two or mor e noncontiguous time intervals dur i ng which th e monitor e d variab lo 
e xc ee ded th o thr e shold dur i ng th e eliding window in time ; 

detecting when the time above threshold value exceeds a predefined 
condition window value; and 

in response to detecting when the time above threshold value exceeds 
said condition windo w value , generating an alarm. 



17. (Previously Presented) A non-volatile electronic storage medium that 
electronically stores a computer program configured to cause a computer fef 
monitor i ng an e l e m o nt in a comput e r n o twork, said program stored on a comput e r 
readabl e medium for causing a comput e r cystom to perform the functions of: 
presenting a user with a plurality of variables associated with one or more elements 
in a computer network: 

receiving a selection by the user of two or more of the presented variables. 
the two or more selected variables comprising a first selected variable and a second 
selected variable: 

defining a profile for the selected variables that e l e mont . said profile including 
a plurality of different alarm rules, the plurality of different alarm rules comprising a 
first alarm rule each of said diffor n nt a larm rnlnr , establishing an alarm test for the 
first selected variable, and a second alarm rule establishing an alarm test for the 
second selected variable a corr e sponding onn nr mnrn vnr i. nh inr.; 
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detecting when the alarm test for any one or more of the plurality of different 
alarm rules is met , including the first alarm rule and the second alarm rule : 

r e p ea t e d l y g e n e rat i ng a t i m e abov e thr e sho l d valu e , s aid tim o abov o 
thr es hold valu o bo i ng a moasur o of an amount of tim o during wh i ch at l o a c t on o of 
th e one or mor e alarm t e ste has b ee n m e t dur i ng a pres ele cted prior window of t i m o , 
wh e r e in th e measur e of th e amount of tim e during which at le ast on e of th e on o or 
more alarm t e sts has b ee n m e t during th e pr e sel e cted prior window of t i m e includ e s 
an aggr e gation of two or mor e noncontiguous tim e int e rva l s during which at l ea st 
on e of th e on e or more alarm t e sts has b ee n mot dur i ng a pros e lected prior w i ndow 

d e tecting wh e n the tim e abov o thr e shold value o xc oe ds a pr o dof i n o d 
condit i on window valu o ; and 

in response to detecting that one or both of the first alarm rule and/or 
the second alarm rule are met wh e n th e time abov o thr e shold value e xcnndr. r . n i d 
cond i tion window , generating an output to the user connoting that one or more of the 
plurality of different alarm rules has been met such that the output identifies the 
profile for the selected variables to the user without indicating which of the plurality of 
different alarm rules included in the profile for the selected variables has been met 

18. (Cancel) 
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